Enable Accessibility and Full Disk Access

For macOS 10.14 (Mojave) and later, Apple includes user data protections, which are managed by Apple's expanded security framework, Transparency Consent and Control (TCC), that prevent third-party applications from unauthorized interaction with the computer.

The Mac Agent requires permissions for Accessibility and Full Disk Access for macOS 10.14 (Mojave) and later. If a device is not enrolled in Device Management for Apple, you must enable those permissions for the device.

Device Management for Apple remotely manages these security preferences with Apple's Privacy Preferences Policy Control (PPPC) payload so that when a device is enrolled in Device Management for Apple, all required permissions are enabled.

To enable Accessibility and Full Disk Access for the Mac Agent:

If a device is enrolled in Device Management for Apple, these permissions are enabled and you do not need to complete this task.

  1. On the Mac device, go to System Preferences and choose Security & Privacy
  2. Select Privacy then Accessibility
  3. Click the padlock in the bottom left corner to unlock and allow changes
  4. Enter the computer’s administrative account credentials when prompted
  5. Click the plus icon below the main window to open the file browser
  6. Press command + shift + G and enter /usr/local/rmmagent/rmmagentd
  7. Click Open

    The /usr/local/rmmagent/rmmagentd box is ticked in the main window

  8. Before you close the Security & Privacy window, select Full Disk Access and repeat the steps to enable access for /usr/local/rmmagent/rmmagentd
  9. Close the Security & Privacy window